Control
Evidence-based evaluation of the design and operation of critical controls.
home page
Factories
SPECIAL ASSURANCE FOR YOUR INDUSTRY
Are the cyber risks that could affect your production under control?
Executive visibility into production continuity, delivery commitments and IT/OT access. We work with IT and automation teams and independently verify the effectiveness of controls.
Schedule an initial meeting for your institution ↗FactoriesREPRESENTATIVE SECTOR SCENARIO
Our production systems have been operating for years. So why could the production network be accessed from the office network?
Production continued. The IT and automation teams kept operations running. The actual effectiveness of rules governing traffic between networks had not been independently tested.
Business impact in terms of production disruption, delivery commitments and operational continuity is made visible.
Explore the story and management questions ↗CRITICAL POINTS OF YOUR INSTITUTIONfrom your priorities
from your priorities
Here we go.
Controls are selected based on the organization's function, infrastructure and authorized audit scope.
01
IT/OT network separation
↗02
PLC management access
↗03
Supplier remote connections
↗04
Backups of production systems
↗05
Industrial network security
↗those questions
Did you ask?
The scenarios on this page are illustrative examples of risk; they are not presented as findings from past customers.
backup04ILLUSTRATIVE SCENARIOQUESTION FROM THE MANAGERDoes this investment really pay off?
Backup is taken every night, but cannot be restored
invisible problemThe backup tasks appear to be successful; There was no restore test where the application was actually opened.
- Business impact
- After a malfunction or ransomware incident, recovery of data and services may take longer than expected.
- What is siberkobi doing?
- Backup integrity, application consistency, storage, accesses, and restore evidence in an isolated environment are checked.
- Recommended improvement
- Measurable return tests are planned for critical services; duration, data loss and dependency results are recorded.
Network Security08ILLUSTRATIVE SCENARIOQUESTION FROM THE MANAGERDoes this investment really pay off?
Accounting server's remote desktop is on
invisible problemThe RDP service of the accounting server can be accessed directly from the Internet; access source is unrestricted.
- Business impact
- Unnecessary exposure of a sensitive system can increase the risk of authentication attacks and service interruptions.
- What is siberkobi doing?
- Exposed services, firewall permissions, VPN/gateway usage, MFA and access logs are examined.
- Recommended improvement
- Direct access is turned off; Remote access is provided with approved VPN or secure gateway, MFA and narrow resource permissions.
OT and Factory Security09ILLUSTRATIVE SCENARIOQUESTION FROM THE MANAGERDoes this investment really pay off?
Production network and office network are not separated
invisible problemOffice computers and production systems are in the same trust zone; The traffic in between is not limited by business needs.
- Business impact
- An event that starts on the office network can reach production dependencies; It may cause downtime and safe operating problems.
- What is siberkobi doing?
- IT/OT topology, traffic routes, waypoints and segmentation rules are verified with methods that do not affect production.
- Recommended improvement
- Network regions are divided according to production needs; Controlled transitions and maintenance procedures are planned with OT managers.
WHAT WILL YOU GET?Clarity to management.
01 02 03
Clarity to management.
Road map for teams.
Findings prioritized according to their impact on production and an improvement / verification plan agreed with OT responsible.
Improvement guidance
Recommendations, custodians and target dates prioritized by business impact.
Reaffirmation
Control confirming the closure of actions and periodic follow-up within the appropriate scope.
Application support is only offered within the scope of a separately agreed contract. The service is not a guarantee of regulatory compliance or certification.
FIRST, WE AUDIT. THEN, WE MONITOR CONTINUOUSLY.
Let's take the first step together.
Let's talk about your institution, your investments and your audit priorities in a free preliminary meeting.
Request a Free Introductory Consultation ↗Nerede olursanız olun yanınızdayız.
8 şehirde teknik denetim ve kontrol ekibimizle hizmet veriyoruz: Ankara, İstanbul, İzmir, Manisa, Aydın, Çorum, Sinop ve Samsun.
CLEAR SCOPE. SUSTAINABLE ASSURANCE.Start with an audit.
Start with an audit.
Keep Checking.
IT and OT Cybersecurity Audit
Tailored proposal
One-time audit service.
- Comprehensive assessment over 7–14 days
- Technical and process controls
- Identification of critical risks
- Executive risk report
- Prioritized action plan
Continuous Control System
Tailored proposal
Monthly subscription · Scope defined by contract.
- Compact checking device
- Infrastructure for periodic automated checks
- Dashboard access
- Risk and finding tracking
- Management visibility
VAT excluded. Scope and on-site expenses are defined by contract. Contact our team to purchase.